Update StoreSAFE
Mobile client for Codex and Claude — control coding agents from your phone via WebSocket bridge
Overview
Mobile client for Codex and Claude — control coding agents from your phone via WebSocket bridge
6b4afc353bc7OBSERVED · 2026-10-12What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: update-store description: ccpocketのストア掲載用スクリーンショットや説明文・リリースノートを作成・更新するときに使う。 --- # Update Store 依頼されたストア素材を更新する。指定済みの対象・言語・デバイスを優先し、未指定なら依頼に対応する既存素材の対象・言語・デバイス構成を引き継ぐ。文言・翻訳・要約はCHANGELOGと実装差分から自動決定し、承認を求めない。既存素材と会話から対象を特定できない場合だけ確認する。 - 説明文・リリースノート等: [references/metadata.md](references/metadata.md)。文章だけの更新にシミュレーターは不要。 - スクリーンショット撮影・合成: [references/screenshots.md](references/screenshots.md)。必要なデバイスの節を使い、既存シミュレーターを再利用する。 - 審査提出まで依頼されている場合: [../submit-store-review/SKILL.md](../submit-store-review/SKILL.md) の対象選択・累積差分・提出境界に従う。 更新内容は対象バージョンのCHANGELOGと実装差分に基づける。審査用のリリースノートは公開版からの累積差分を使う。 文章は内容・対象言語を、画像は生成後の見た目・解像度・配置先を検証し、修正が必要なら再生成する。素材作成の依頼だけでストアへのアップロードや審査提出まで広げない。
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (2)
.agents/skills
AGENTS.md
Gates applied: no_behavioural_pass.
6b4afc353bc7full audit observations/trust-audit/skill/k9i-0__update-store.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 6b4afc353bc7 | SAFE | B | 89 | first audit |
Questions
What does the Update Store skill do?
Mobile client for Codex and Claude — control coding agents from your phone via WebSocket bridge
Is Update Store safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Update Store access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (6b4afc353bc7), read on 2026-10-12. The repository is watched, and a new audit runs when it changes — this is the first audit.